CVE-2026-90616 | Flatpak up to 1.18.0 Sandbox Directory Binding link following

A vulnerability classified as problematic was found in Flatpak up to 1.18.0. The affected element is an unknown function of the component Sandbox Directory Binding. The manipulation results in link following.

This vulnerability is known as CVE-2026-90616. Attacking locally is a requirement. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More